
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json)
Hash identifier: Hfi/7abqzjPMf07VnZOkkKTshwIJRtGSulwxeE29NT0=
Subject key identifier: 83:76:E9:F8:91:EE:05:92:E5:4E:17:E0:55:D6:06:09:05:F3:42:2C
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial: 02D1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
Manifest number: 02CB
Signing time: Tue 06 Oct 2026 16:50:52 +0000
Manifest this update: Tue 06 Oct 2026 16:50:52 +0000
Manifest next update: Tue 13 Oct 2026 16:50:52 +0000
Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: KdixByvOmyXv/c+srcBX2ZNwSZ7tf5Rryzo5Zi70Kns=)
2: 04594232DEA011EE91181415C4F9AE02.roa (hash: r0uDvba6DftUN0N3BUlL384UPeW2DqBJfJ5rm2wQtaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Validity
Not Before: Oct 6 16:50:52 2026 GMT
Not After : Oct 13 16:50:52 2026 GMT
Subject: CN=6ac526ec-8f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:51:c0:f4:1e:f6:1d:40:14:5d:2d:89:a2:
b9:62:13:b8:a1:48:db:82:0e:9d:b5:51:22:71:b4:
30:1c:71:45:a3:95:ba:5c:86:78:58:b1:5b:79:fa:
b9:67:7b:84:d4:b3:a5:23:20:52:44:9b:49:fe:6d:
69:fe:ca:7c:20:dc:38:24:3e:c0:5a:2a:55:ae:34:
51:29:4d:f8:15:f6:81:9a:e3:f2:b1:91:56:e8:66:
33:e9:6f:67:c8:54:28:de:06:3f:46:d3:fb:5b:cc:
51:9f:0b:2b:88:d4:40:c9:ee:27:a4:34:5a:fe:8e:
02:ea:1f:cb:af:7a:25:8b:ff:04:0c:4b:09:e5:64:
24:1f:66:c1:48:82:fd:8c:8b:0c:10:3c:9b:d3:3f:
18:4e:69:54:13:d8:a8:49:0f:50:fa:6d:e3:bf:2b:
43:a0:18:18:be:e4:ba:cb:e6:39:09:26:f7:0a:ef:
77:02:3f:1c:8b:fc:b1:5e:ae:3f:f5:8b:80:b4:c6:
63:b4:92:8e:80:7a:09:c8:6b:25:6c:e2:00:14:bc:
0c:30:ff:4e:62:76:b0:3c:96:52:f5:59:e6:d5:14:
b6:58:d1:73:30:48:75:fc:ae:f4:05:40:54:6e:7a:
8f:1b:d3:8f:df:c2:ec:91:ab:34:1f:7f:23:b2:77:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:76:E9:F8:91:EE:05:92:E5:4E:17:E0:55:D6:06:09:05:F3:42:2C
X509v3 Authority Key Identifier:
keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b8:b2:dd:9b:13:c6:50:db:b8:99:05:85:0d:6d:bc:3f:d9:
7c:bb:3b:2b:2a:d2:c1:75:ff:40:b6:67:03:46:5f:6e:f2:18:
c9:db:5a:e8:41:4a:d1:6b:5e:d4:0f:04:b0:dd:9a:c5:a7:9e:
73:33:12:9a:da:71:f2:51:27:ba:53:54:e9:73:50:b8:81:c8:
e0:90:e9:0e:b4:e7:00:2b:12:bb:76:b9:59:84:85:ce:cb:a7:
54:44:5b:d2:bb:6a:1f:72:ba:12:cb:9d:08:2c:d7:33:1a:1e:
35:f3:ae:4e:fa:45:71:2e:ac:01:db:7c:a6:ae:fd:a2:f1:56:
c7:7b:aa:45:11:03:e9:4d:e3:02:3f:be:99:5d:95:c4:bb:76:
9d:b7:5b:bb:8c:1a:c3:92:5b:59:98:08:82:d9:7c:26:67:60:
97:46:95:34:c8:bf:5c:7a:a1:18:5c:f1:c1:ce:01:c8:55:05:
1b:83:e3:e5:d5:ac:ff:b1:f2:21:9b:7d:39:be:d1:d3:be:b3:
eb:d5:58:ea:95:aa:f6:1d:b3:fd:ad:1e:85:53:d4:02:4a:c8:
fc:ce:4e:34:86:2e:db:c1:71:c2:49:6c:03:c6:4d:e8:2f:8c:
bb:f3:30:7c:28:f8:ce:60:62:1c:37:c1:ec:5a:a1:ad:58:c1:
b9:68:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:13:33 2026 by rpki-client